An unspecified version of tripexpress is affected by a... · CVE-2021-43691 · GitHub Advisory Database · GitHub

An unspecified version of tripexpress is affected by a...

Critical severity Unreviewed Published Nov 30, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An unspecified version of tripexpress is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php. The variable src is coming from $_SERVER["argv"] then there is a path manipulation vulnerability.

References

Published by the National Vulnerability Database

Nov 29, 2021

Published to the GitHub Advisory Database Nov 30, 2021

Last updated Feb 1, 2023